Hello, I'm evaluating, in the context of a research contract in intrusion detection, security audit for different J2EE platforms, including IBM Websphere
application server (Advanced Edition). I have to find a way to log requests to remote objects, including values of the parameters (I don't think it is possible with tool like OLT, which only logs classes and methods of the requested
objects). So, I would like to use ORB interceptors to log the class, the methods and the parameters of the remote objects that are requested. I tried to deploy my server- side interceptor as it is explained in the document available
at : But the interceptor that I wrote with that specification is not deployed at the initialisation of the server (and is never taken into consideration). I think that the configuration file to deploy interceptor is in fact not accessed (config.txt in lib/ujc.jar).
Can you explain me the way to deploy ORB interceptors. If you know any other way to reach log informations that include parameters with no modification of the code of applications, I would be very interested.
Thanks,
bf35
application server (Advanced Edition). I have to find a way to log requests to remote objects, including values of the parameters (I don't think it is possible with tool like OLT, which only logs classes and methods of the requested
objects). So, I would like to use ORB interceptors to log the class, the methods and the parameters of the remote objects that are requested. I tried to deploy my server- side interceptor as it is explained in the document available
at : But the interceptor that I wrote with that specification is not deployed at the initialisation of the server (and is never taken into consideration). I think that the configuration file to deploy interceptor is in fact not accessed (config.txt in lib/ujc.jar).
Can you explain me the way to deploy ORB interceptors. If you know any other way to reach log informations that include parameters with no modification of the code of applications, I would be very interested.
Thanks,
bf35